Consumer Health Data Privacy Policy

This policy describes how Daylark handles consumer health data under Washington's My Health My Data Act (RCW 19.373).

Consumer health data we collect, and why

• Your child's log — the entries you and the other caregivers in your family record: feedings (what and how much), sleep, diaper changes, leisure activities, growth measurements (weight, height, head circumference) and health entries (a medication name and dose, a body temperature, or a vaccination), and the notes added to entries and to days.
• Your pumping entries — when you pumped, from which side and how much.
• That an entry was logged — only if you turn on usage analytics in the app: each time an entry is saved, the app then records that an entry was saved and whether it has a note, linked to your Daylark account. It does not record which category the entry is in. Earlier versions of the app also recorded the category (for example, a health entry), and Google Analytics keeps those records for us.

We use this data to:

• keep the log and show it to you and to the caregivers in your family, in the timeline and in the statistics;
• notify the other caregivers in your family when an entry is added, with a notification that names its category, for example "a health record";
• if you turn on usage analytics, count how many entries are logged, so that we can see how Daylark is used and improve it; and
• answer your requests about this data, such as an export or a deletion.

Where it comes from

• You, when you record an entry.
• The other caregivers in your family, when they record one.
• The Daylark app on your device, which records each entry saved while usage analytics is on, and in earlier versions also recorded its category.

Consumer health data we share, and with whom

• The other caregivers in your family — the whole log, every entry and note. They are the people a family member invited, or whose request to join the family owner approved.
• Apple, which delivers notifications to iPhones — the category of an entry just added, with your family's name and the name of the caregiver who added it.

We have no affiliates.

Your rights

You have the right to:

• confirm whether we collect, share or sell consumer health data about you or your child, and have access to it, with a list of every third party we have shared it with and an email address or online form for contacting each;
• withdraw your consent to our collecting and sharing it; and
• have it deleted.

How to make a request

While your consent is in force, you can export your data, withdraw your consent, or delete your account in the app, under Settings → Account & data. Withdrawing your consent works on the device you withdraw on: if you use Daylark on more than one device, withdraw on each of them. After you withdraw, the app on that device shows only the consent screen, so you cannot see, export or delete anything in it until you consent again, except that you can delete your account there; the entries already in the log are kept and stay visible to the rest of your family. To stop sharing the log with another caregiver, the family's owner can remove them under Settings → Family & children. If you own your family, deleting your account deletes your child's log. If you are another member of it, the log stays with the family, and so do the entries you recorded, your pumping entries included. Deleting an account does not delete the record of the entries logged, with their categories where an earlier version of the app recorded them, which Google Analytics keeps for us. To have any of this deleted, to stop our keeping or sharing the log, or for any other request, email privacy@daylark.net, from the address you sign in with if you have a Daylark account. You do not need to create an account to make a request.

We answer within 45 days of receiving your request. Where that is reasonably necessary, because the request is complex or you sent several, we can extend that once by 45 more days; if we do, we tell you why within the first 45 days.

If we decline to act on your request, you can appeal: reply to our answer or email privacy@daylark.net with "Appeal" in the subject line. We answer an appeal in writing within 45 days of receiving it, with the reasons for our decision. If we deny it, we also tell you how to contact your state's Attorney General to submit a complaint.